华为配置问题

难得悠哉

这是一台华为2831路由器的配置 现在的问题是把E3/0 down了之后 E0/0 和 E0/1就不通了 为什么啊？？？
[huawei2831]dis cur
#
sysname huawei2831
#
cpu-usage cycle 1min
#
connection-limit enable
connection-limit default permit
#
nat address-group 1 202.108.208.1 202.108.208.110
nat aging-time tcp 900
nat aging-time pptp 900
nat aging-time ftp-ctrl 900
#
radius scheme system
#
domain system
#
local-user admin
password cipher @[>.J4;U/T.C,F=A-$!'#Q!!
service-type telnet terminal
level 3
service-type ftp
local-user gfdx-int123
password cipher @[>.J4;U/T.9S,G%)\D@SA!!
service-type telnet                     
level 3
#
acl number 2000
rule 0 permit source 202.205.32.0 0.0.0.255
rule 1 permit source 202.205.33.0 0.0.0.255
rule 2 permit source 202.205.34.0 0.0.0.255
rule 3 permit source 202.205.35.0 0.0.0.255
rule 4 permit source 202.205.36.0 0.0.0.255
rule 5 permit source 202.205.37.0 0.0.0.255
rule 6 permit source 202.205.38.0 0.0.0.255
rule 7 permit source 202.205.39.0 0.0.0.255
rule 8 permit source 202.205.40.0 0.0.0.255
rule 9 permit source 202.205.41.0 0.0.0.255
rule 10 permit source 202.205.42.0 0.0.0.255
rule 11 permit source 202.205.43.0 0.0.0.255
rule 12 permit source 202.205.44.0 0.0.0.255
rule 13 permit source 202.205.45.0 0.0.0.255
rule 14 permit source 202.205.46.0 0.0.0.255
rule 15 permit source 202.205.47.0 0.0.0.255
rule 16 deny
acl number 2001
rule 1 permit source 202.205.33.0 0.0.0.255
rule 2 permit source 202.205.34.0 0.0.0.255
rule 3 permit source 202.205.35.0 0.0.0.255
rule 4 permit source 202.205.36.0 0.0.0.255
rule 5 permit source 202.205.37.0 0.0.0.255
rule 6 permit source 202.205.38.0 0.0.0.255
rule 7 permit source 202.205.39.0 0.0.0.255
rule 8 permit source 202.205.40.0 0.0.0.255
rule 9 permit source 202.205.41.0 0.0.0.255
rule 10 permit source 202.205.42.0 0.0.0.255
rule 11 permit source 202.205.43.0 0.0.0.255
rule 12 permit source 202.205.44.0 0.0.0.255
rule 13 permit source 202.205.45.0 0.0.0.255
rule 14 permit source 202.205.46.0 0.0.0.255
rule 15 permit source 202.205.47.0 0.0.0.255
rule 16 deny
#
acl number 3000
rule 0 deny tcp destination-port eq 4444
rule 1 deny udp destination-port eq tftp
rule 2 deny tcp destination-port eq 135
rule 3 deny udp destination-port eq 135
rule 4 deny tcp destination-port eq 139
rule 5 deny udp destination-port eq netbios-ssn
rule 6 deny tcp destination-port eq 445
rule 7 deny udp destination-port eq 445
rule 8 deny tcp destination-port eq 593  
rule 9 deny udp destination-port eq 593
rule 10 deny udp destination-port eq 1434
rule 11 deny tcp destination-port eq 5554
rule 12 deny tcp destination-port eq 1433
rule 13 permit ip
acl number 3100
rule 0 deny tcp destination-port gt 6000
rule 1 deny udp destination-port gt 6000
rule 2 deny tcp source-port gt 6000
rule 3 deny udp source-port gt 6000
#
connection-limit policy 10
limit 0 acl 2001 per-source amount 20 10
#
interface Aux0
async mode flow
#
interface Ethernet0/0
description outside
ip address 61.148.16.146 255.255.255.252
firewall packet-filter 3100 inbound
firewall packet-filter 3100 outbound
nat outbound 2000 address-group 1
#                                         
interface Ethernet0/1
ip address 202.108.208.254 255.255.254.0
firewall packet-filter 3100 inbound
firewall packet-filter 3100 outbound
#
interface Ethernet3/0
ip address dhcp-alloc
#
interface NULL0
#
FTP server enable
#
ip route-static 0.0.0.0 0.0.0.0 61.148.16.145 preference 60
ip route-static 202.205.32.0 255.255.240.0 202.108.208.253 preference 60
ip route-static 202.205.35.0 255.255.255.0 202.205.35.222 preference 60
#
snmp-agent
snmp-agent local-engineid 000007DB7F000001000006B1
snmp-agent community write gfdx
snmp-agent community write huawei
snmp-agent sys-info version v1 v3
#
user-interface con 0
user-interface aux 0                     
user-interface vty 0 4
authentication-mode scheme
#
return

HW奋斗er

没什么关系的吧

鲁智林

鲁智林

不错！

Uncle-齐

阅读权限啊

xiaohutushen

幸福的海